Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File:                     UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier:          Sm53CDarHhahEg2s8wPZ6aPMvjmJIK7rtJB3ZHbxnFM=
Subject key identifier:   43:B5:89:05:92:CE:BF:9E:66:C5:05:38:C4:3E:12:BC:63:E6:46:B5
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer:       /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial:       019FA9AB85DC6324E55196BC62925990CE0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:18 +0000
Files and hashes:         1: Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa (hash: 3uzaIFxXEFFxlqJhGt+PM/l/uaNGyKXUk1SwVD4qq1o=)
                          2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: b5iO/5FEV4AmS5FZAhR69nbn17v1C1b4XVfT1O0knrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:85:dc:63:24:e5:51:96:bc:62:92:59:90:ce:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
        Validity
            Not Before: Jul 28 17:00:18 2026 GMT
            Not After : Jul 29 17:00:18 2026 GMT
        Subject: CN=43b5890592cebf9e66c50538c43e12bc63e646b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:2d:7f:4e:93:ad:eb:d5:ab:ce:8b:f6:63:
                    3d:98:94:e7:26:bb:48:3e:4a:51:b1:3e:73:9b:70:
                    dc:62:dc:e9:1b:5b:48:b7:00:7f:9f:24:06:b1:46:
                    d0:e5:e3:78:57:e2:5a:b2:86:94:b0:d6:ff:2e:cd:
                    77:c4:13:de:a3:53:10:ab:3e:5c:46:89:02:10:a5:
                    b4:4a:c9:85:4f:71:e2:e3:ae:db:f5:60:92:8c:69:
                    8b:a5:22:f1:17:4a:c0:e9:a0:30:e2:f3:f4:75:4c:
                    af:9d:a7:e2:e4:75:4c:f1:ef:77:fe:49:a8:40:5a:
                    98:de:cc:e4:fe:96:c4:c2:14:73:94:54:35:e2:3a:
                    ec:1b:d4:7d:95:2b:d8:23:69:34:11:c9:b6:14:e4:
                    97:cb:45:b6:70:9f:41:f4:a5:47:4a:19:45:49:ce:
                    5e:a4:0a:32:13:e7:8a:e0:2a:4a:bd:e2:63:6d:a6:
                    43:8b:b9:f1:88:4a:2a:38:92:b2:88:fa:d2:89:fb:
                    36:29:fc:74:a3:8e:17:55:5a:60:0e:a0:67:2c:1b:
                    3f:d7:22:ff:fa:fe:1a:4a:38:c5:95:37:54:16:61:
                    1f:dc:f7:51:de:e1:7d:89:5c:7b:ab:fa:5f:6c:3c:
                    5b:d5:df:7d:86:99:d8:b3:37:da:cf:7f:37:d1:fd:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B5:89:05:92:CE:BF:9E:66:C5:05:38:C4:3E:12:BC:63:E6:46:B5
            X509v3 Authority Key Identifier:
                keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:36:b1:f6:61:55:90:9e:f7:bc:c4:e7:dc:71:83:ba:75:47:
         12:bf:90:3d:7b:25:50:a7:3e:f9:bc:e0:9d:f8:f1:1e:7e:a9:
         14:94:90:78:dc:94:e7:05:1b:d1:66:68:2c:ed:9b:b3:b0:4f:
         b1:d9:ce:ab:e4:84:13:8e:a7:58:f5:a8:7b:9f:a6:93:75:a9:
         0b:bb:e2:3b:23:05:1e:51:5e:04:27:e4:57:a6:77:0e:54:0c:
         38:bd:15:dc:0d:69:7e:9e:6c:62:91:74:93:71:e0:46:80:77:
         ff:d2:59:c2:9d:2f:e8:ed:51:f6:36:6c:df:a1:cd:d9:e2:ab:
         73:75:0e:b2:18:ae:86:c3:aa:eb:99:16:55:9a:5c:26:5d:07:
         df:6c:3e:95:9c:69:ef:ec:fb:82:d1:78:c7:c1:94:9c:c4:76:
         49:73:13:33:2a:bd:5b:01:d4:65:df:91:26:28:1f:e2:a8:48:
         d4:ac:e0:12:65:ab:5f:b3:64:4f:3d:13:4b:23:dc:42:51:fd:
         14:6a:78:ca:20:0e:06:7f:d5:02:ce:39:e9:fa:e6:b1:ab:8c:
         21:2f:d7:50:80:5d:9b:d1:ad:e5:9f:34:21:3a:82:77:cd:b7:
         53:93:23:f8:19:b3:3a:80:2b:b4:3b:8a:02:82:e6:ef:58:aa:
         2f:6b:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:36 2026 by rpki-client